From 2ab8863beb50096e8e73a82e60b0d6b7569bdc3a Mon Sep 17 00:00:00 2001
From: Oussama Hassine <oussama.has100@gmail.com>
Date: Wed, 14 Feb 2024 14:44:09 +0100
Subject: [PATCH] feat: allow http calls when checking Certificate Revocation
 List (WPB-6493) - cherrypick (#2707)

---
 app/src/main/AndroidManifest.xml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/app/src/main/AndroidManifest.xml b/app/src/main/AndroidManifest.xml
index f76f5432ac8..7f20fcc2544 100644
--- a/app/src/main/AndroidManifest.xml
+++ b/app/src/main/AndroidManifest.xml
@@ -61,7 +61,11 @@
         android:name="android.hardware.camera"
         android:required="false" />
 
+    <!--  usesCleartextTraffic is true as we need to check Certificate Revocation List in HTTP.
+    The CRL itself is signed by the issuer so there is no security issue.
+    For all other calls, we use HTTPS, and this is enforced by OkHttp using ConnectionSpecs. -->
     <application
+            android:usesCleartextTraffic="true"
             android:name=".WireApplication"
             android:allowBackup="false"
             android:fullBackupContent="false"